[Libvir] Connecting to remote hypervisors?

I might be overlooking something, but, I don't see anything on the libvirt site about it. Does libvirt support connecting to a remote hypervisor, if so, how? Thanks, Nick Devito

On Wed, Jul 12, 2006 at 05:29:15PM -0600, Nick Devito wrote:
I might be overlooking something, but, I don't see anything on the libvirt site about it. Does libvirt support connecting to a remote hypervisor, if so, how?
Unfortunately this isn't supported. At this time, XenD does not provide a secure mechanism for connecting to it remotely. While you can have XenD listen for TCP connections, however, there are *zero* security checks made / authorization performed. It is not tenable to support such an insecure connection mechanism via libvirt. The good news is that the upstream Xen developers are aware that this is a big problem, and in the XML-RPC protocol being developed for XenD, it appears there will at least be some form of username/password authentication used for remote TCP connections. Thus when the XML-RPC API for XenD is released we will be able to more seriously look at allowing remote hypervisor connections from libvirt. Regards. Dan. -- |=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=| |=- Perl modules: http://search.cpan.org/~danberr/ -=| |=- Projects: http://freshmeat.net/~danielpb/ -=| |=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|

On Thu, Jul 13, 2006 at 04:44:45AM +0100, Daniel P. Berrange wrote:
On Wed, Jul 12, 2006 at 05:29:15PM -0600, Nick Devito wrote:
I might be overlooking something, but, I don't see anything on the libvirt site about it. Does libvirt support connecting to a remote hypervisor, if so, how?
Unfortunately this isn't supported.
Actually, in 0.1.3 it might work (though not really recommended as you explained for security reasons). If if allow remote xend HTTP access and use virConnectOpen("http://remote_host:8000/") this may work, I say may because I didn't tested it specifically, as Daniel pointed out it doesn't really feel right to promote unauthenticated remote access. Daniel -- Daniel Veillard | Red Hat http://redhat.com/ veillard@redhat.com | libxml GNOME XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | Rpmfind RPM search engine http://rpmfind.net/
participants (3)
-
Daniel P. Berrange
-
Daniel Veillard
-
Nick Devito